Embedded Systems Conference
Breaking News
Comments
Newest First | Oldest First | Threaded View
fmotta
User Rank
Author
More Correct: Lack of security in NFC is slowing NFC-based payment programs
fmotta   5/21/2014 5:25:49 PM
NO RATINGS
For a short time the USA credit card companies were automatically sending NFC-based cards.  Everyone I know that received one watched as I used an Arduino and cloned it.  Then they sent the card back requesting the safer cards without the silicon-based security hole (called NFC).

SIMs have been more secure than NFC for quite some time.  So, I assert that the the need for improved security should be to bar the ability for attack by a script-kiddie with $30 worth of equipment (or an Android phone now - see Electronic Pickpocket app at Play store - Free).

 

ngpd
User Rank
Author
Security... for whom?
ngpd   5/13/2014 11:02:58 AM
NO RATINGS
While many might like the speed and convenience of ticketless payments, lots of people are worried about the security aspects. Witness, for example, all the adverts for wallets and passport covers that act as NFC shields. The idea of having a payment card that broadcasts my account details makes me very concerned!

The idea of a single card (or device) that authenticates my payments is all very good, provided that it cannot be cloned, it stops working if it is lost or stolen (and I can get a replacement very quickly, even if abroad), and it does not reveal information about me beyond that which is necessary for the transaction. A tall order!

There is also the issue of how the information about payments is stored and used. If I contact my mobile phone operator, my identity is validated by easily-discoverable information... and a PIN which can be discovered by many employees. I do not call this secure, so entrusting more information to them does not seem wise. basically, all 'security' and 'trust' seems to run one way, so it seems sensible to limit ones vulnerability until systems offering mutual trust are put in place.

Pablo Valerio
User Rank
Author
Re: Want more
Pablo Valerio   5/12/2014 5:44:51 PM
@ip2design, I agree with you. There is no reason for SIM based security to be slower. But the security layers implemented by the service providers --and mostly by the SIM system integrators-- have serious implications on speed.

Looks like TfL and other transit authorities have been working closer with cell companies and system integrators and the issue is being resolved.

ip2design
User Rank
Author
Re: Want more
ip2design   5/11/2014 3:01:36 AM
NO RATINGS
Hi Pablo,

We all know that NFC-SIMs and embedded Secure Elements are fast enough to perform access control the right way at the right speed. Most of the ICs are now based on 32-bit core running at 30MHz with hardware crypto and secure OS.So, there may be some tricks to optimize the solution.

 

Pablo Valerio
User Rank
Author
Re: Want more
Pablo Valerio   5/10/2014 4:59:02 PM
NO RATINGS
Susan Rambo
User Rank
Author
Want more
Susan Rambo   5/10/2014 9:59:14 AM
NO RATINGS
Hi Pablo, thanks for the interesting blog. You say you've written frequently about this issue. Where can we find more of blogs?



Radio
NEXT UPCOMING BROADCAST
In conjunction with unveiling of EE Times’ Silicon 60 list, journalist & Silicon 60 researcher Peter Clarke hosts a conversation on startups in the electronics industry. One of Silicon Valley's great contributions to the world has been the demonstration of how the application of entrepreneurship and venture capital to electronics and semiconductor hardware can create wealth with developments in semiconductors, displays, design automation, MEMS and across the breadth of hardware developments. But in recent years concerns have been raised that traditional venture capital has turned its back on hardware-related startups in favor of software and Internet applications and services. Panelists from incubators join Peter Clarke in debate.
Flash Poll
Top Comments of the Week
Like Us on Facebook

Datasheets.com Parts Search

185 million searchable parts
(please enter a part number or hit search to begin)
Special Video Section
Chwan-Jye Foo (C.J Foo), product marketing manager for ...
The LT®3752/LT3752-1 are current mode PWM controllers ...
LED lighting is an important feature in today’s and future ...
Active balancing of series connected battery stacks exists ...
After a four-year absence, Infineon returns to Mobile World ...
A laptop’s 65-watt adapter can be made 6 times smaller and ...
An industry network should have device and data security at ...
The LTC2975 is a four-channel PMBus Power System Manager ...
In this video, a new high speed CMOS output comparator ...
The LT8640 is a 42V, 5A synchronous step-down regulator ...
The LTC2000 high-speed DAC has low noise and excellent ...
How do you protect the load and ensure output continues to ...
General-purpose DACs have applications in instrumentation, ...
Linear Technology demonstrates its latest measurement ...
10:29
Demos from Maxim Integrated at Electronica 2014 show ...
Bosch CEO Stefan Finkbeiner shows off latest combo and ...
STMicroelectronics demoed this simple gesture control ...
Keysight shows you what signals lurk in real-time at 510MHz ...
TE Connectivity's clear-plastic, full-size model car shows ...
Why culture makes Linear Tech a winner.